CVE-2023-54285
published 2025-12-30CVE-2023-54285: In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomap_write_delalloc_scan folio_next_index()…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.16%
5.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
iomap: Fix possible overflow condition in iomap_write_delalloc_scan
folio_next_index() returns an unsigned long value which left shifted
by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead
use folio_pos(folio) + folio_size(folio), which does this correctly.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.162-1 (bookworm) | linux 6.1.162-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.162-1 (bookworm) | linux 6.1.162-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 38be53c3fd7f4f4bd5de319a323d72f9f6beb16d < 0c6cf409093f307ee05114f834516730c0da5b21 | 0c6cf409093f307ee05114f834516730c0da5b21 |
| linux | linux | >= 6.1.92 < 6.1.162 | 6.1.162 |
| linux | linux | >= f43dc4dc3eff028b5ddddd99f3a66c5a6bdd4e78 < 5c281b0c5d18c8eeb1cfd5023f4adb153e6d1240 | 5c281b0c5d18c8eeb1cfd5023f4adb153e6d1240 |
| linux | linux | >= f43dc4dc3eff028b5ddddd99f3a66c5a6bdd4e78 < eee2d2e6ea5550118170dbd5bb1316ceb38455fb | eee2d2e6ea5550118170dbd5bb1316ceb38455fb |
| linux | linux_kernel | >= 0 < 6.1.162-1 | 6.1.162-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 6.1.92 < 6.1.162 | 6.1.162 |
| linux | linux_kernel | >= 6.2 < 6.5.5 | 6.5.5 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: iomap: Fix possible overflow condition in iomap_write_delalloc_scan
vendor_redhat·2025-12-30·CVSS 7.8
CVE-2023-54285 [HIGH] CWE-190 kernel: iomap: Fix possible overflow condition in iomap_write_delalloc_scan
kernel: iomap: Fix possible overflow condition in iomap_write_delalloc_scan
In the Linux kernel, the following vulnerability has been resolved:
iomap: Fix possible overflow condition in iomap_write_delalloc_scan
folio_next_index() returns an unsigned long value which left shifted
by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead
use folio_pos(folio) + folio_size(folio), which does this correctly.
An integer overflow vulnerability was found in the iomap subsystem. On 32-bit systems, calculating folio positions could overflow when large folios are used, potentially causing incorrect delalloc extent scanning.
Statement: This affects 32-bit systems only, which are uncommon in modern deployments. The overflow requires specific memory and filesystem conditions to trigge
Debian
CVE-2023-54285: linux - In the Linux kernel, the following vulnerability has been resolved: iomap: Fix ...
vendor_debian·2023·CVSS 7.8
CVE-2023-54285 [HIGH] CVE-2023-54285: linux - In the Linux kernel, the following vulnerability has been resolved: iomap: Fix ...
In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomap_write_delalloc_scan folio_next_index() returns an unsigned long value which left shifted by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead use folio_pos(folio) + folio_size(folio), which does this correctly.
Scope: local
bookworm: resolved (fixed in 6.1.162-1)
bullseye: resolved
forky: resolved (fixed in 6.5.6-1)
sid: resolved (fixed in 6.5.6-1)
trixie: resolved (fixed in 6.5.6-1)
GHSA
GHSA-wfvh-f2f6-f56w: In the Linux kernel, the following vulnerability has been resolved:
iomap: Fix possible overflow condition in iomap_write_delalloc_scan
folio_next_i
ghsa_unreviewed·2025-12-30
CVE-2023-54285 [HIGH] CWE-787 GHSA-wfvh-f2f6-f56w: In the Linux kernel, the following vulnerability has been resolved:
iomap: Fix possible overflow condition in iomap_write_delalloc_scan
folio_next_i
In the Linux kernel, the following vulnerability has been resolved:
iomap: Fix possible overflow condition in iomap_write_delalloc_scan
folio_next_index() returns an unsigned long value which left shifted
by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead
use folio_pos(folio) + folio_size(folio), which does this correctly.
OSV
CVE-2023-54285: In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomap_write_delalloc_scan folio_next_ind
osv·2025-12-30·CVSS 7.8
CVE-2023-54285 [HIGH] CVE-2023-54285: In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomap_write_delalloc_scan folio_next_ind
In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomap_write_delalloc_scan folio_next_index() returns an unsigned long value which left shifted by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead use folio_pos(folio) + folio_size(folio), which does this correctly.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54285 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.8
CVE-2023-54285 [HIGH] CVE-2023-54285 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54285 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
iomap: Fix possible overflow condition in iomap_write_delalloc_scan
folio_next_index() returns an unsigned long value which left shifted
by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead
use folio_pos(folio) + folio_size(folio), which does this correctly.
Source : NVD
## 7.8
Score
Published December 30, 2025
Severity HIGH
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 1.4
Exploitation Probability (EPSS) N/A
Affected packages and libraries
linux-ibm
kernel-rt
Bugzilla
CVE-2023-54285 kernel: iomap: Fix possible overflow condition in iomap_write_delalloc_scan
bugzilla·2025-12-30·CVSS 7.8
CVE-2023-54285 [HIGH] CVE-2023-54285 kernel: iomap: Fix possible overflow condition in iomap_write_delalloc_scan
CVE-2023-54285 kernel: iomap: Fix possible overflow condition in iomap_write_delalloc_scan
In the Linux kernel, the following vulnerability has been resolved:
iomap: Fix possible overflow condition in iomap_write_delalloc_scan
folio_next_index() returns an unsigned long value which left shifted
by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead
use folio_pos(folio) + folio_size(folio), which does this correctly.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123027-CVE-2023-54285-edc0@gregkh/T
2025-12-30
Published